$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: ovEKGFKRNkieTVyGeSPYIKc0Zrc3te8CRldEJa6pOs8= Subject key identifier: 9D:31:23:23:7E:92:0B:CD:B9:53:8C:E6:05:02:91:4A:F5:98:3B:A3 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A03 Signing time: Fri 02 May 2025 20:03:08 +0000 Manifest this update: Fri 02 May 2025 20:03:08 +0000 Manifest next update: Fri 09 May 2025 20:03:08 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: SibJj2LA0U+p/GBCXtQo0Kp1tYz8W8ymrl5ZN51RMMo=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 6NSS3ImO+7MeAasEgP9eh6JpYdQNeKV6AFWR2pkbZBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: May 2 20:03:08 2025 GMT Not After : May 9 20:03:08 2025 GMT Subject: CN=681524fc-4502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:e9:90:c7:33:28:85:db:4c:3e:87:7a:c1: e0:58:23:41:fb:48:aa:a6:66:0c:b9:da:ef:19:58: fc:e1:2b:c2:db:f6:c4:1e:f8:7b:28:c3:ad:fa:dc: ca:4c:72:61:01:b7:57:c3:d3:b0:8b:54:5c:ef:56: f4:fc:86:cc:90:25:dd:b3:8f:1a:30:0f:75:da:41: 3d:67:7a:61:37:98:f7:a1:5e:03:1f:db:3b:fb:e7: de:94:ec:49:46:19:fa:72:0a:cc:dd:1b:61:ba:4c: 5b:87:da:5e:69:36:28:bd:2e:8a:25:d7:c1:42:44: 9d:93:1c:ce:b0:f0:7e:4e:37:5f:a7:1e:de:8d:cf: 17:b3:2c:85:03:25:52:00:ec:ce:b4:c2:dd:9f:84: d9:ca:66:b2:0d:eb:80:31:01:c5:d1:c2:54:f4:86: 93:bc:7a:fb:a7:8d:d4:a0:86:54:ce:8b:00:2c:ef: dc:4b:56:68:d8:59:db:fa:c1:04:ab:f3:4a:f0:b3: 6b:48:a0:2f:46:90:7d:0c:52:0c:f8:ec:2d:51:f5: 9a:55:1a:5b:e7:3d:3e:f1:5e:4b:04:d7:8c:0c:f9: 81:c6:f3:81:2e:bd:eb:0c:cb:a8:4a:45:dd:3a:44: 01:e9:a3:06:7d:29:60:b6:ac:fe:1e:b0:2c:c8:e4: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:23:23:7E:92:0B:CD:B9:53:8C:E6:05:02:91:4A:F5:98:3B:A3 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:63:07:22:ec:36:77:d6:34:0f:7c:f4:de:17:26:1c:86: 87:6d:e2:af:71:b9:7f:26:b0:76:fa:67:16:b4:b5:f8:96:1f: e1:ee:2e:cf:32:e2:76:ef:13:f0:12:cd:d1:41:77:5d:8b:d9: 53:4c:e5:21:3d:20:e9:29:3c:a4:85:2d:37:29:48:ef:b4:25: 9e:06:71:77:97:9e:af:fd:71:5b:14:d5:f4:f2:d1:5d:5a:6d: e3:cd:34:48:f9:59:de:c4:71:1b:79:3a:54:d2:25:84:0b:58: 33:35:8e:f5:fc:cd:a1:76:cc:e0:79:5d:eb:91:37:43:a7:04: e2:b8:59:f2:91:d2:b6:56:f8:3d:15:b1:3a:59:67:8c:bf:6c: ca:af:8d:9c:9f:26:2f:8c:97:62:46:42:dc:09:c7:b2:93:c3: c4:25:e9:54:bd:99:93:36:5c:96:70:4e:1a:66:26:d9:aa:6f: f2:35:6a:b6:ac:74:de:ae:fd:54:61:d5:20:74:63:fd:95:ef: d9:01:5e:e0:49:f8:54:8d:a9:c0:a0:ec:e5:c8:35:13:51:d5: ff:52:a8:25:f7:7e:48:14:ed:e0:10:cb:8b:b8:fa:7a:e1:d8: 1b:c6:9b:a8:2d:16:6e:8e:d4:43:ad:72:da:5f:4a:30:99:53: ef:7c:75:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwNTAyMjAwMzA4WhcNMjUwNTA5MjAwMzA4WjAYMRYwFAYD VQQDEw02ODE1MjRmYy00NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3rpkMczKIXbTD6HesHgWCNB+0iqpmYMudrvGVj84SvC2/bEHvh7KMOt+tzK THJhAbdXw9Owi1Rc71b0/IbMkCXds48aMA912kE9Z3phN5j3oV4DH9s7++felOxJ Rhn6cgrM3Rthukxbh9peaTYovS6KJdfBQkSdkxzOsPB+Tjdfpx7ejc8XsyyFAyVS AOzOtMLdn4TZymayDeuAMQHF0cJU9IaTvHr7p43UoIZUzosALO/cS1Zo2Fnb+sEE q/NK8LNrSKAvRpB9DFIM+OwtUfWaVRpb5z0+8V5LBNeMDPmBxvOBLr3rDMuoSkXd OkQB6aMGfSlgtqz+HrAsyOTxswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0xIyN+ kgvNuVOM5gUCkUr1mDujMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0T2MHIuw2d9Y0D3z03hcmHIaHbeKvcbl/JrB2+mcWtLX4lh/h7i7P MuJ27xPwEs3RQXddi9lTTOUhPSDpKTykhS03KUjvtCWeBnF3l56v/XFbFNX08tFd Wm3jzTRI+VnexHEbeTpU0iWEC1gzNY71/M2hdszgeV3rkTdDpwTiuFnykdK2Vvg9 FbE6WWeMv2zKr42cnyYvjJdiRkLcCceyk8PEJelUvZmTNlyWcE4aZibZqm/yNWq2 rHTerv1UYdUgdGP9le/ZAV7gSfhUjanAoOzlyDUTUdX/Uqgl935IFO3gEMuLuPp6 4dgbxpuoLRZujtRDrXLaX0owmVPvfHW4 -----END CERTIFICATE-----Generated at Sun May 4 04:58:39 2025 by rpki-client